PT-2010-1156 · Oracle+2 · Openoffice.Org+2
Vincent Danen
·
Publicado
2010-02-12
·
Atualizado
2022-02-07
·
CVE-2009-2950
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenOffice.org (OOo) versions prior to 3.2
Description
The issue is related to a heap-based buffer overflow in the GIFLZWDecompressor function, which can be triggered by a crafted GIF file. This can cause a denial of service, resulting in an application crash, or potentially allow the execution of arbitrary code. The vulnerability is associated with LZW decompression and can be exploited by a remote attacker to access confidential data, compromise data integrity, or disrupt service.
Recommendations
For OpenOffice.org (OOo) versions prior to 3.2, update to version 3.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of GIF files or restricting access to the GIFLZWDecompressor function until a patch is applied.
Correção
DoS
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Openoffice
Openoffice.Org
Red Hat